Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa
File:                     323830343a346632383a3a2f33322d3332203d3e20323638333038.roa (raw, json)
Hash identifier:          sFzx+Ud9TvnCYhAt+3fqKoup9ocFV58RwV8gHTAOroQ=
Subject key identifier:   E3:9D:65:2F:AD:23:E5:EF:52:C5:85:9F:C4:3E:EB:6E:CE:59:F9:52
Certificate issuer:       /CN=8D04B01D1AC6E397E778A8BB24BF8A398E2E8187
Certificate serial:       08FC815A08C55AECF59E2D3E97DF6048B6D2BA30
Authority key identifier: 8D:04:B0:1D:1A:C6:E3:97:E7:78:A8:BB:24:BF:8A:39:8E:2E:81:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D04B01D1AC6E397E778A8BB24BF8A398E2E8187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa
Signing time:             Fri 12 Sep 2025 19:44:51 +0000
ROA not before:           Fri 12 Sep 2025 19:39:51 +0000
ROA not after:            Fri 11 Sep 2026 19:44:51 +0000
asID:                     268308
IP address blocks:        2804:4f28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/8D04B01D1AC6E397E778A8BB24BF8A398E2E8187.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/8D04B01D1AC6E397E778A8BB24BF8A398E2E8187.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D04B01D1AC6E397E778A8BB24BF8A398E2E8187.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fc:81:5a:08:c5:5a:ec:f5:9e:2d:3e:97:df:60:48:b6:d2:ba:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D04B01D1AC6E397E778A8BB24BF8A398E2E8187
        Validity
            Not Before: Sep 12 19:39:51 2025 GMT
            Not After : Sep 11 19:44:51 2026 GMT
        Subject: CN=E39D652FAD23E5EF52C5859FC43EEB6ECE59F952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:74:57:43:ca:b9:eb:3a:25:6c:99:94:3c:
                    b2:a6:70:6d:d5:a2:38:33:b1:ef:d5:3f:3d:ee:1c:
                    c4:be:0e:0f:e5:61:54:f0:17:b7:c2:df:7e:11:ea:
                    48:e2:6e:a5:6c:1f:dd:a7:bc:67:ef:5f:97:a1:2d:
                    fa:3c:62:3c:8c:b3:de:ee:44:1d:9e:dd:ae:ee:74:
                    6e:11:09:0c:3b:32:8e:78:ca:52:22:29:c2:5b:18:
                    da:88:3d:33:f9:5a:a4:e7:16:a9:55:cf:33:f4:9a:
                    7b:eb:44:5a:cf:8c:c5:9e:6a:32:e6:ad:b2:f5:81:
                    70:df:ab:02:74:7c:26:bc:3c:2a:3c:a6:d2:57:b7:
                    39:a4:b6:df:5c:63:5d:45:07:64:99:6b:b7:b4:11:
                    65:bd:32:19:5f:31:28:1c:f4:d2:a6:c3:63:07:6c:
                    f8:b7:dd:71:6a:60:1f:36:53:17:18:9d:3b:fd:82:
                    af:d5:c3:ae:65:3b:27:b7:22:a3:83:f2:ed:7d:d8:
                    80:22:2b:d3:5b:7d:03:1f:c5:c5:2c:ab:d8:c9:9f:
                    da:df:44:ba:4a:65:67:74:5f:d7:63:31:ce:da:11:
                    05:d6:8d:93:81:9d:b8:b3:0c:1d:d5:61:97:77:a0:
                    1c:e2:e5:28:4c:b4:9e:03:f3:ba:fc:2a:85:a7:b4:
                    03:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9D:65:2F:AD:23:E5:EF:52:C5:85:9F:C4:3E:EB:6E:CE:59:F9:52
            X509v3 Authority Key Identifier:
                keyid:8D:04:B0:1D:1A:C6:E3:97:E7:78:A8:BB:24:BF:8A:39:8E:2E:81:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/8D04B01D1AC6E397E778A8BB24BF8A398E2E8187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D04B01D1AC6E397E778A8BB24BF8A398E2E8187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:12:92:ce:41:1b:53:b2:b4:df:e0:b6:3f:01:f8:dc:c8:ad:
         04:f1:36:fc:c3:b3:47:1a:24:39:68:da:fd:3f:a7:af:ae:67:
         1b:04:32:cc:d5:d2:39:38:e9:1b:d5:f9:39:e4:11:06:2b:b0:
         7b:bc:2b:28:6b:22:df:40:d9:f7:73:2e:7e:54:5b:7c:10:ce:
         b8:83:b1:9d:2d:b6:21:7f:7e:c5:b9:ab:b2:59:30:79:53:2f:
         73:d7:7c:10:fa:5e:8d:87:82:0d:ef:bc:c4:f5:2d:0b:ce:6e:
         91:54:eb:0e:fb:b6:8b:f4:72:a3:84:7e:95:ae:1f:56:31:ab:
         ff:d8:e0:42:da:3d:9a:b4:d3:1c:8d:1d:95:54:6f:42:7f:82:
         97:cb:b5:5c:6c:5e:e9:17:f3:c9:79:55:e9:99:0f:01:7b:0d:
         51:ae:a1:11:9e:9e:01:38:bb:c6:59:b4:b3:f1:e1:44:b5:74:
         2f:fa:ee:6b:c6:3b:48:ec:79:2c:7d:f3:2e:be:03:d7:3e:cf:
         43:94:19:5f:38:65:7f:81:bb:96:99:a2:de:4c:ee:52:9d:2b:
         55:a4:35:38:ff:cd:84:ac:db:dc:91:e8:e4:82:34:1b:5f:12:
         d2:2a:52:1c:9c:3c:a6:30:ab:4b:b8:d4:23:71:7b:ba:19:2e:
         6f:93:d2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:53:04 2025 by rpki-client